medium5.0
CVE-2012-1056
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwar…
Impact
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sean Robertson | Forward | Versions 6.x-1.0, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.4, 6.x-1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/1423722
- http://drupal.org/node/1425150
- http://osvdb.org/78817
- http://secunia.com/advisories/47851
- http://www.securityfocus.com/bid/51826
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72920
- http://drupal.org/node/1423722
- http://drupal.org/node/1425150
- http://osvdb.org/78817
- http://secunia.com/advisories/47851
- http://www.securityfocus.com/bid/51826
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72920